CVE and update status of the FreeBSD ports tree3,295 unaddressed CVEs in 670 portsAll times are CET
Port details

www/nghttp2 1.70.0

HTTP/2 tools

Port info

Maintainer
sunpoet@FreeBSD.org
Packages
latest: 1.70.0
Upstream
up to date
Last update
to 1.70.0 · 3e581f4724
Quarterly
2026Q4: 1.70.0
WWW
https://nghttp2.org/
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install nghttp2
installs 1.70.0 from latest; from quarterly (2026Q4) 1.70.0
Port
# cd /usr/ports/www/nghttp2 && make install clean
# make -C /usr/ports/www/nghttp2 config  # change options first
Size
687 KiB download · 2.8 MiB installed
Depends on
archivers/brotli 1.2.1,1, devel/jansson 2.15.1_1, devel/libev 4.33_1,1, devel/libevent 2.1.13, dns/c-ares 1.34.9, textproc/libxml2 2.15.4, www/libnghttp2 1.70.0
License
MIT
Options
4 of 4 on in the package: APP DOCS EXAMPLES HPACK

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 161.70.01.70.0–
FreeBSD 151.70.01.70.0–
FreeBSD 141.70.01.70.01.70.0

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 151.70.01.70.0–
FreeBSD 141.70.01.70.01.70.0

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.70.0.

Fixed (6)

Show 6 fixed
VuXML entries whose affected range the packaged version has left.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (191)

Gerald Pfeifer (gerald) · 1.25.0_1
Bump PORTREVISION for ports depending on the canonical version of GCC (via Mk/bsd.default-versions.mk and lang/gcc) which has moved from GCC 5.4 to GCC 6.4 under most circumstances.

This includes ports
 - with USE_GCC=yes or USE_GCC=any,
 - with USES=fortran,
 - using Mk/bsd.octave.mk which in turn features USES=fortran, and
 - with USES=compiler specifying openmp, nestedfct, c++11-lib, c++11-lang,
   c++14-lang, c++0x, c11, or gcc-c++11-lib.

PR:		219275
e59c88cece
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.25.0
Update to 1.25.0

Changes:	https://github.com/nghttp2/nghttp2/releases
ea721bb5df
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.24.0
Update to 1.24.0

Changes:	https://github.com/nghttp2/nghttp2/releases
95c3e13579
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.23.1
Update to 1.23.1

Changes:	https://github.com/nghttp2/nghttp2/releases
e7f6072fd8
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.23.0
Update to 1.23.0

Changes:	https://github.com/nghttp2/nghttp2/releases
d883968a47
Jan Beich (jbeich) · 1.22.0_1
devel/boost-*: update to 1.64.0

Changes:	http://www.boost.org/users/history/version_1_64_0.html
PR:		218835
Approved by:	office (bapt)
Exp-run by:	antoine
Differential Revision:	https://reviews.freebsd.org/D10472
b324ade02d
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.22.0
Update to 1.22.0

Changes:	https://github.com/nghttp2/nghttp2/releases
1c42448808
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.21.1
Update to 1.21.1

- Fix shebang

Changes:	https://github.com/nghttp2/nghttp2/releases
168fb342eb
Dmitry Marakasov (amdmi3) · 1.21.0_1
- Remove obsolete OSVERSION condition

Approved by:	portmgr blanket
0bc97bbfdc
Gerald Pfeifer (gerald) · 1.21.0_1
Bump PORTREVISIONs for ports depending on the canonical version of GCC and lang/gcc which have moved from GCC 4.9.4 to GCC 5.4 (at least under some circumstances such as versions of FreeBSD or platforms).

This includes ports
 - with USE_GCC=yes or USE_GCC=any,
 - with USES=fortran,
 - using using Mk/bsd.octave.mk which in turn has USES=fortran, and
 - with USES=compiler specifying openmp, nestedfct, c++11-lib, c++14-lang,
   c++11-lang, c++0x, c11, or gcc-c++11-lib.

PR:		216707
04d6f52202
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.21.0
Update to 1.21.0

Changes:	https://github.com/nghttp2/nghttp2/releases
0c6c65d445
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.20.0
Update to 1.20.0

Changes:	https://github.com/nghttp2/nghttp2/releases
578511f2c7
Jan Beich (jbeich) · 1.19.0_2
devel/libevent2: drop historical suffix after r362796

PR:		216777
Approved by:	mm (maintainer)
a9425224f1
Jan Beich (jbeich) · 1.19.0_1
devel/libevent2: update to 2.1.8 and cleanup

- DEFAULT_VERSIONS += ssl=openssl-devel is now supported
- devel/py-event and devel/p5-Event-Lib are marked BROKEN

Changes:	https://github.com/libevent/libevent/raw/release-2.1.8-stable/whatsnew-2.1.txt
Changes:	https://github.com/libevent/libevent/raw/release-2.1.8-stable/ChangeLog
PR:		216527
Exp-run by:	antoine
Approved by:	mm (maintainer)
21a7215c9a
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.19.0
Fix build with LibreSSL

Differential Revision:	https://reviews.FreeBSD.org/D9334
Submitted by:	brnrd
Obtained from:	https://github.com/nghttp2/nghttp2/commit/16be89f9ccba4d37e34ef03f20009a9845efeb99
		https://github.com/nghttp2/nghttp2/commit/1cc08c0a51d273afc0e7b4e11eeb0b889d154ee0
08da49766a
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.19.0
Update to 1.19.0

Changes:	https://github.com/nghttp2/nghttp2/releases
2f407d4401
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.18.1
- Update to 1.18.1

Changes:	https://github.com/nghttp2/nghttp2/releases
c0345f725e
Jan Beich (jbeich) · 1.18.0_1
devel/boost-*: update to 1.63.0

Changes:	http://www.boost.org/users/history/version_1_63_0.html
PR:		215598
Exp-run by:	antoine
Approved by:	office (bapt)
MFH:		2017Q1
59e02117ae
Jan Beich (jbeich) · 1.18.0
Assume "pkg-config zlib" works after 9.x reached EOL

Many ports passed ZLIB_CFLAGS="-I/usr/include" ZLIB_LIBS="-L/usr/lib -lz"
which is unsafe at least with lang/gcc* that override some system headers
and have newer libgcc_s.so that our old version in base may not be
forward-compatible with.
32d56ae68a
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.18.0
Remove outdated OSVERSION check
a70a4fde17
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.18.0
- Update to 1.18.0 - Add BUILD_DEPENDS: make sure using same version libnghttp2 - Remove ASIO_RUN_DEPENDS: BUILD_DEPENDS is sufficient to block unqualified version

Changes:	https://github.com/nghttp2/nghttp2/releases
eec3bbfc84
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.17.0_3
- Fix EXAMPLES option - Remove superfluous space - Bump PORTREVISION for dependency and package change
7747b9e69b
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.17.0_2
- Merge post-configure:

PR:		215382
Reported by:	Anton Sayetsky <vsasjason@gmail.com>
f44590c204
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.17.0_2
- Update for libnghttp2 change (moved into www/libnghttp2) - Add LIB_DEPENDS on www/libnghttp2 - Copy libnghttp2 to lib/ to avoid unnecessary rebuild - Bump PORTREVISION for dependency and package change
096906da0d
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.17.0_1
- Add EXAMPLES option - Update pkg-descr - Bump PORTREVISION for package change
9786cfe4ae
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.17.0
- Fix PLIST

r421805 introduced APP option but manpages are designed to be installed unconditionally.
ae3f9965c8
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.17.0
- Update to 1.17.0

Changes:	https://github.com/nghttp2/nghttp2/releases
b9d0f94742
Jan Beich (jbeich) · 1.16.1_1
devel/boost-*: update to 1.62.0

- Enable `long double` C99 math usage
- Switch 9.x back to building with GCC

Changes:	http://www.boost.org/users/history/
PR:		199601
Submitted by:	Chen Xu, bapt, amdmi3, truckman (based on)
Reviewed by:	rakuco (kde) (earlier version)
Exp-run by:	antoine (3 tries), truckman (consumers only, earlier versions)
Approved by:	bapt (office)
a8713d15f4
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.16.1
- Fix build for hosts without __cxa_thread_atexit
c9d85540b6
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.16.1
- Update to 1.16.1

Changes:	https://github.com/nghttp2/nghttp2/releases
5f3f315e78
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.15.0
- Cosmetic change - Remove unnecessary second argument of @sample
4171a3205f
Mathieu Arnold (mat) · 1.15.0
Use USES=pathfix where applicable.

PR:		213195
Submitted by:	mat
Exp-run by:	antoine
Sponsored by:	Absolight
Differential Revision:	https://reviews.freebsd.org/D8093
a0bcd2cf68
Bernard Spil (brnrd) · 1.15.0
www/nghttp2: Update to 1.15.0

- Update to 1.15.0
  - Bump shlib-version

PR:		213044
Approved by:	Maintainer timeout
1e345e2a26
Bernard Spil (brnrd) · 1.14.1
www/nghttp2: Update to 1.14.1

- Update to 1.14.1
  - Update pkg-plist for shlib versions

Approved by:	Maintainer timeout
34310aa19f
Bernard Spil (brnrd) · 1.14.0
www/nghttp2: Update to 1.14.0

- Update to 1.14.0
  - Switch USE_OPENSSL to USES= ssl
  - Add options for APPS and SPDY
  - Default no change (i.e. APPS and SPDY on)
  - Add rc-script for nghttpx
  - Add sample config for nghttpx

PR:             211336, 211494, 211774
Submitted by:   brnrd (211336, version update)
Submitted by:   peter (211494, rc-script and sample config)
Submitted by:   Robert Schulze <rs@bytecamp.net> (211774, APPS and SPDY options)
Approved by:    Maintainer timeout
201d601b4b
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.11.1
- Update to 1.11.1

Changes:	https://github.com/nghttp2/nghttp2/releases
00a1fe6368
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.11.0
- Update to 1.11.0

Changes:	https://github.com/nghttp2/nghttp2/releases
3251f4df7e
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.10.0
- Update to 1.10.0

Changes:	https://github.com/nghttp2/nghttp2/releases
2bbe449e56
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.9.2
- Update to 1.9.2

Changes:	https://github.com/nghttp2/nghttp2/releases
e1b1bb11f3
Mathieu Arnold (mat) · 1.9.1
Remove ${PORTSDIR}/ from dependencies, categories v, w, x, y, and z.

With hat:	portmgr
Sponsored by:	Absolight
72ea7e696b
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.9.1
- Update to 1.9.1 - Remove GH_ACCOUNT

Changes:	https://github.com/nghttp2/nghttp2/releases
5544e5d879
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.8.0
- Update to 1.8.0

Changes:	https://github.com/tatsuhiro-t/nghttp2/releases
8151b9f230
Kevin Lo (kevlo) · 1.7.1
Add a patch from upstream commit f0b5a8db8c50e03bde30be96ed6172e220533411 to fix build.
233c799736
Bernard Spil (brnrd) · 1.7.1
www/nghttp2: Update to version 1.7.1

- Convert MASTER_SITES to USE_GITHUB
    - Remove USES=tar:xz
  - Remove unneeded RUN_DEPENDS
  - Add USES=autoreconf
  - Fix pkgconfig path
  - Remove defunct configure jemalloc fix
  - Fix LDFLAGS -ldl problem

Reviewed by:	koobs (mentor), feld (mentor)
Approved by:	feld (mentor)
Differential Revision:	D5218
MFH:		2016Q1
b2afa563c5
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.6.0
- Update to 1.6.0

Changes:	https://github.com/tatsuhiro-t/nghttp2/releases
40c6dd2b7d
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.5.0
- Update to 1.5.0

Changes:	https://github.com/tatsuhiro-t/nghttp2/releases
84eb67645f
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.4.0
- Use USES=localbase - Cleanup Makefile
266d9da5d9
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.4.0
- Update to 1.4.0

Changes:	https://github.com/tatsuhiro-t/nghttp2/releases
b280196af0
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.3.4
- Update to 1.3.4

Changes:	https://github.com/tatsuhiro-t/nghttp2/releases
b407364c48
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.3.3
- Update to 1.3.3 - Add LICENSE_FILE

Changes:	https://github.com/tatsuhiro-t/nghttp2/releases
73c9948dfb